From 1223d4c897fd5715a9a1b35caf632ab305114e7a Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:27:51 +0000
Subject: [PATCH 1/9] Updating security workflow file

---
 .github/workflows/jit-security.yml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 .github/workflows/jit-security.yml

diff --git a/.github/workflows/jit-security.yml b/.github/workflows/jit-security.yml
new file mode 100644
index 0000000..cf52c41
--- /dev/null
+++ b/.github/workflows/jit-security.yml
@@ -0,0 +1,21 @@
+name: Workflows generated by the MVS plan
+run-name: ${{fromJSON(github.event.inputs.client_payload).payload.job_title}}
+
+on:
+  workflow_dispatch:
+    inputs:
+       client_payload:
+          description: The Client payload
+          required: true
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  jit-ci-job:
+    runs-on: ubuntu-22.04
+    timeout-minutes: ${{ fromJSON(github.event.inputs.client_payload).payload.runner_setup.timeout_minutes }}
+    steps:
+    - name: ${{ fromJSON( inputs.client_payload ).payload.workflow_job_name }}
+      uses: jitsecurity-controls/jit-github-action@latest
\ No newline at end of file

From 8e138dd3512ec8f2916fb2c33d733bcfc1e753a1 Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:27:53 +0000
Subject: [PATCH 2/9] Write plan yml file

---
 .jit/jit-plan.yml | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 .jit/jit-plan.yml

diff --git a/.jit/jit-plan.yml b/.jit/jit-plan.yml
new file mode 100644
index 0000000..df639ea
--- /dev/null
+++ b/.jit/jit-plan.yml
@@ -0,0 +1,13 @@
+# This file was generated by Jit at 2025-05-19T10:27:44.073373
+name: My plan
+level: beginner
+author: Jit
+version: 0.1
+owners:
+  default:
+references:
+  - https://www.jit.io
+tags: []
+#----------- List of plan items -----------
+items: []
+

From 28bf5b142662b224c9cb0937b7efc242ee640cb5 Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:27:55 +0000
Subject: [PATCH 3/9] Create an empty configuration.yml file

---
 .jit/jit-config.yml | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 .jit/jit-config.yml

diff --git a/.jit/jit-config.yml b/.jit/jit-config.yml
new file mode 100644
index 0000000..e69de29

From a33d4c00a1253089823ef335eaec1c2a5dde79ce Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:27:56 +0000
Subject: [PATCH 4/9] Create an empty integration.yml file

---
 .jit/jit-integration.yml | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 .jit/jit-integration.yml

diff --git a/.jit/jit-integration.yml b/.jit/jit-integration.yml
new file mode 100644
index 0000000..e69de29

From ab84d14352b6c55b19ce287c76ae30b0f1f7f0c2 Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:29:13 +0000
Subject: [PATCH 5/9] Write plan yml file

---
 .jit/jit-plan.yml | 20 ++++++++++++--------
 1 file changed, 12 insertions(+), 8 deletions(-)

diff --git a/.jit/jit-plan.yml b/.jit/jit-plan.yml
index df639ea..b7ace66 100644
--- a/.jit/jit-plan.yml
+++ b/.jit/jit-plan.yml
@@ -1,13 +1,17 @@
-# This file was generated by Jit at 2025-05-19T10:27:44.073373
-name: My plan
-level: beginner
 author: Jit
-version: 0.1
+items:
+- name: Scan your code for vulnerabilities (SAST)
+  uses: jitsecurity-controls/jit-plans/items/code/item-code-vulnerability.yml@latest
+- name: Scan your code dependencies for vulnerabilities (SCA)
+  uses: jitsecurity-controls/jit-plans/items/code/item-dependency-check.yml@latest
+- name: Scan code for hard-coded secrets
+  uses: jitsecurity-controls/jit-plans/items/code/item-secret-detection.yml@latest
+level: beginner
+name: My plan
 owners:
-  default:
+  default: null
 references:
-  - https://www.jit.io
+- https://www.jit.io
 tags: []
-#----------- List of plan items -----------
-items: []
+version: 0.1
 

From 0289b96d0554e4fe419beecb190a88e4b195e7f7 Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 10:29:30 +0000
Subject: [PATCH 6/9] Sync with plan


From 167bc59a304535d4b2842204668bcd207f64bdad Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Tue, 20 May 2025 00:24:05 +0000
Subject: [PATCH 7/9] Write plan yml file

---
 .jit/jit-plan.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.jit/jit-plan.yml b/.jit/jit-plan.yml
index b7ace66..3a706a5 100644
--- a/.jit/jit-plan.yml
+++ b/.jit/jit-plan.yml
@@ -6,6 +6,8 @@ items:
   uses: jitsecurity-controls/jit-plans/items/code/item-dependency-check.yml@latest
 - name: Scan code for hard-coded secrets
   uses: jitsecurity-controls/jit-plans/items/code/item-secret-detection.yml@latest
+- name: Analyze for Jit Context
+  uses: jitsecurity-controls/jit-plans/items/jit-context/item-jit-context-analysis.yml@latest
 level: beginner
 name: My plan
 owners:

From 165f4b84bfbf9eaed778043da449974b0626c745 Mon Sep 17 00:00:00 2001
From: "jit-ci[bot]" <91912817+jit-ci[bot]@users.noreply.github.com>
Date: Tue, 20 May 2025 00:24:39 +0000
Subject: [PATCH 8/9] Sync with plan


From 0ea041374c9ff55660991cc3207c0a6844083b2e Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 24 May 2025 07:39:17 +0000
Subject: [PATCH 9/9] fix: Dockerfile to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN12-GCC12-5901316
- https://snyk.io/vuln/SNYK-DEBIAN12-GCC12-5901316
- https://snyk.io/vuln/SNYK-DEBIAN12-GCC12-5901316
- https://snyk.io/vuln/SNYK-DEBIAN12-KRB5-6277421
- https://snyk.io/vuln/SNYK-DEBIAN12-KRB5-6277421
---
 Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index bad6139..55c5533 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.9-slim
+FROM python:3.13.3-slim
 
 WORKDIR /app